CVE-2010-0156
Puppet 0.24.0-0.24.8 and 0.25.0-0.25.1 - Arbitrary File Write via Symlink Attack on Temporary Files
Title source: llmDescription
Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.
References (8)
Core 8
Core References
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/38766
Patch x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=502881
Patch mailing-list
x_refsource_mlist
http://groups.google.com/group/puppet-announce/browse_thread/thread/4401823f6cbf6087
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
Mailing List mailing-list
x_refsource_mlist
http://groups.google.com/group/puppet-announce/browse_thread/thread/73cd1b2896d986c2
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036083.html
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036166.html
Various Sources x_refsource_confirm
https://puppet.com/security/cve/cve-2010-0156
Scores
EPSS
0.0003
EPSS Percentile
9.2%
Details
CWE
CWE-59
Status
published
Products (10)
puppet/puppet
0.24.3
puppet/puppet
0.24.4
puppet/puppet
0.24.5
puppet/puppet
0.24.6 (3 CPE variants)
puppet/puppet
0.24.7 (2 CPE variants)
puppet/puppet
0.24.8 (2 CPE variants)
puppet/puppet
0.25.0 (4 CPE variants)
puppet/puppet
0.25.1 (3 CPE variants)
puppet/puppet
0.25.2 rc1 (3 CPE variants)
rubygems/puppet
0.24.0 - 0.24.9RubyGems
Published
Mar 03, 2010
Tracked Since
Feb 18, 2026